|
hmm
Do we have the same app?
Program Files\Proxy Switcher Standard
Thats the dir I have and the .app is ProxySwitcher.exe 4.15mb. I place it in olly with ignoring all debug exceptions. I have normal antidebug. Also that address you pasted instruction does not correpond. Try downloading the app again and doing a fresh install, I think your unpack attempt broke it.
00497D06 . B9 48804900 MOV ECX,ProxySwi.00498048 ; ASCII "InProcess debug forced."
00497D0B . B2 01 MOV DL,1
00497D0D . A1 BCA14000 MOV EAX,DWORD PTR DS:[40A1BC]
00497D12 . E8 5D69F7FF CALL ProxySwi.0040E674
00497D17 . E8 28BEF6FF CALL ProxySwi.00403B44
00497D1C > 6A 00 PUSH 0 ; /RootPathName = NULL
00497D1E . E8 09F9F6FF CALL <JMP.&kernel32.GetDriveTypeA> ; \GetDriveTypeA
00497D23 . 83F8 04 CMP EAX,4
00497D26 . 75 20 JNZ SHORT ProxySwi.00497D48
00497D28 . A1 04C46B00 MOV EAX,DWORD PTR DS:[6BC404]
00497D2D . 8338 01 CMP DWORD PTR DS:[EAX],1
00497D30 . 74 16 JE SHORT ProxySwi.00497D48
00497D32 . B9 68804900 MOV ECX,ProxySwi.00498068 ; ASCII "Shellexecute wont work properly on network drive."
Thats what I have for that addr. So reinstall app, start fresh, and just load it directly in olly and see what you get.
DONGS
|